Privacy Policy

The controller of the personal data collected on this site is Igor Carvalho Calabraro (the "Controller"), under art. 5, VI, of Law No. 13.709/2018 (Brazil's General Data Protection Law — LGPD).

Requires confirmation: if the operation is run through a legal entity, state here the full corporate name and other identifying details of the controller.

In line with art. 41 of the LGPD, the Controller also acts as the data protection officer. The channel for exercising rights and for inquiries is contato@igorcalabraro.com.br.

We collect only the data you voluntarily provide when filling in the contact form:

• Name and email (required);
• Company or project (optional);
• A one-sentence description of what you need (required);
• Budget range (optional);
• Additional message (optional).

This site has no sign-up, login or authenticated area, and does not collect sensitive data (art. 5, II, of the LGPD). There is no file upload and no intentional collection of children's or adolescents' data.

When the form is submitted, the request's IP address is processed transiently, in memory only, for the sole purpose of rate-limiting submissions (protection against automation and abuse). The IP is not stored in any database, is not linked to the message content, and is not shared. This processing relies on the Controller's legitimate interest in the service's security (art. 7, IX, and art. 10 of the LGPD).

Connection and access logs may be kept by the hosting provider under Brazil's Internet Civil Framework (Law No. 12.965/2014, arts. 13 and 15, where applicable).

Form data is used solely to receive, assess and reply to your contact, and to establish a possible business relationship. Processing relies on the data subject's consent, given by ticking the acceptance box and submitting the form (art. 7, I, of the LGPD), and on the Controller's legitimate interest in assessing and handling the contact (art. 7, IX, of the LGPD).

We do not sell, rent or assign your data. The form content is shared only with the providers strictly necessary to the operation, acting as processors (art. 5, VII, of the LGPD):

• Resend — sends the transactional email that delivers your message to the Controller;
• Vercel — hosts the site and processes requests.

Requires confirmation: if these services carry out international data transfers, assess adequacy under arts. 33 to 36 of the LGPD and put the corresponding contractual clauses in place.

We use no tracking, advertising or profiling cookies. The only browser storage used is strictly functional:

• NEXT_LOCALE cookie — stores your language preference;
• Local storage (localStorage), key "theme" — stores your light or dark theme preference.

This data stays on your device and is not sent to third parties. When enabled, audience metrics are collected in aggregate and anonymously, without cookies and without individual identification, including page performance indicators (Web Vitals).

Form data is kept while there is an active business interest or a legal obligation. Otherwise, it is deleted within 24 months of the last contact, under arts. 15 and 16 of the LGPD. You may request deletion earlier at any time.

Under art. 18 of the LGPD, you may at any time:

• Confirm the existence of processing and access your data (art. 18, I and II);
• Correct incomplete, inaccurate or outdated data (art. 18, III);
• Request anonymization, blocking or deletion of unnecessary or non-compliant data (art. 18, IV);
• Request data portability (art. 18, V);
• Request deletion of data processed on the basis of consent (art. 18, VI);
• Obtain information about sharing (art. 18, VII);
• Withdraw consent (art. 8, § 5, and art. 18, IX).

Requests should be sent to contato@igorcalabraro.com.br and will be answered within the timeframes of art. 19 of the LGPD. You may also petition Brazil's National Data Protection Authority (ANPD).

The site runs exclusively over HTTPS, with a content security policy (CSP), HSTS and other protection headers in place. We adopt technical and administrative measures appropriate to the risk, under arts. 46 to 49 of the LGPD. No security measure is infallible; please let us know if you find any vulnerability.

This policy may be updated to reflect changes in how the site works or in the law. The last-updated date is always shown at the top of this page.